- Public - talk.mikrotik.com.au

Core Routers and Connection Tracking
by Shane Clay 25 Jun '19

25 Jun '19

Hi All We have a few CCR1072's as our border routers, core routers and PE routers. They are pure routers (OSPF, BGP, Routing) with no NAT, Mangle, etc. They just route packets around on public IPs. We're providing internet services to our customers and our IaaS environment. In this scenario it makes sense to me that we would disable connection tracking. Extra over head with no real value? However, once you turn this of you lose the ability to use Established/Related rules in your firewall input chain, making DNS/upgrading/NTP etc a bit of a pain since return packets are dropped. So, I'm curious, are others using CCR's in these scenarios? Do you have connection tracking on or off? Why? Shane

4 5

Mikrotik gear in Colombo Sri Lanka
by Matt Chipman 21 Jun '19

21 Jun '19

Hi guys I know this is probably a long shot but I am here for the weekend doing some work for a friend and need some PTP gear for a max 50meter link. Does anyone know of any local suppliers? thanks, Matt

1 0

UHF Data Radio
by Matt Perkins 20 Jun '19

20 Jun '19

I seem to remember that Mikrotik had a point to point data device that operated I think it was in the LIPD band at 32cm or perhaps 70cm. I cant really remember. It was low speed and I seemed to remember it only has a small amount of access to the band as it did not line up correctly with Australian band plan. I cant seem to find it any more. Does anyone know what im talking about ? Matt /* Matt Perkins Direct 1300 137 379 Spectrum Networks Ptd. Ltd. Office 1300 133 299 matt(a)spectrum.com.au Level 6, 350 George Street Sydney 2000 Spectrum Networks is a member of the Communications Alliance & TIO */

2 3

GNS3 and ROS
by Andrew Gilbett 17 Jun '19

17 Jun '19

Hi Guys, Been playing with GNS3 and ROS and it seems to work well. I have been developing a MPLS test bed to play with. I am using the CHR with no license applied it is just the Free license which should be fine just a speed limit of 1Mbps. I have been trying to get a bgp signaled VPLS to work... but I am not getting a full mesh of connectivity. Diagram at link below. https://paste.pics/88be8dae7c194ad981b142e6655473b8 Router Configs are below https://pastebin.com/xaGDCtR8 I am not able to get traffic between CE1 and CE2 but all other connectivity works... I can see that the VPLS is established between PE1 and PE2 but no traffic traverses it... I am only trying to ping so the packet size should be small... so not an MTU issue yet... If anyone has any ideas that would be most helpful, I suspect that it is something simple. Andrew

1 0

MikroTik Certified Training - opportunities for 'sponsored' places
by Mike Everest 14 Jun '19

14 Jun '19

Hello, We have some 'sponsored' places available at the MikroTik Certifcation training program happening in Melbourne next month (Mon 22 - Wed 24, Thu 25 - Sat 27) Sponsored places are subsidised by MikroTik to help candidates to become mikrotik certified when cost of certification is a barrier for entry - if interested, contact me directly (off-list ;) Cheers! Mike.

1 0

Filtering by part of URL
by Malcolm Faed 06 Jun '19

06 Jun '19

Hi all, I would like to filter access by a portion of the URL. I have a HLS streaming server where the URLs are in the form: http://123.123.123.123:4545/hls/1/1.m3u8 http://123.123.123.123:4545/hls/2/2.m3u8 http://123.123.123.123:4545/hls/3/3.m3u8 (These can not be changed) The server is behind DST-NAT I need to allow / block access from different IP public addresses based on the " hls/1/1.m3u8" part of the URL. Here has been my naive approach that did not work. I tried creating a layer 7 filter add comment="Match HLS stream for CCTV" name=CCTV regexp="\/hls\/1\/1.m3u8" And using this in the filter add action=drop chain=input comment="Drop all traffic to CCTV except allowed" dst-address='my public ip' dst-port=4545 layer7-protocol=CCTV log=yes protocol=tcp src-address=!203.123.168.150 I also tried the forward chain based on the wiki, but since this is behind a DST NAT, I think input is correct. Any advise appreciated. TIA, Mal *Malcolm Faed*Network Broadcast Engineer malcolm(a)avcomm.com.au Av-Comm Office: +61 2 9939 4377 Mobile+61 424 957 053 Unit 24 / 9 Powells Road, Brookvale, NSW 2100, Australia. avcomm.com.au [image: Twitter] <https://twitter.com/AvCommSatellite>[image: Google Plus] <https://plus.google.com/+AvcommAustralia/>[image: Youtube] <https://www.youtube.com/channel/UCO8ZtcnwoTH7e54LAndE-yw>[image: Linkedin] <https://www.linkedin.com/company-beta/6583589/> This e-mail message may contain confidential or legally privileged information and is intended only for the use of the intended recipient(s). Any unauthorised disclosure, dissemination, distribution, copying or the taking of any action in reliance on the information herein is prohibited. E-mails are not secure and cannot be guaranteed to be error free as they can be intercepted, amended, or contain viruses. Anyone who communicates with us by e-mail is deemed to have accepted these risks. Av-Comm is not responsible for errors or omissions in this message and denies any responsibility for any damage arising from the use of e-mail. Any opinion and other statement contained in this message and any attachment are solely those of the author and do not necessarily represent those of the company.

4 7

Mikrotik router & FTTC
by MamAn toO 04 Jun '19

04 Jun '19

Hi, I have recently signed up on an NBN FTTC plan with Internode. I have opted not to buy one of the ISP modem router as I'm wanting more ports (total of minimum 10 Gb ethernet ports). I have spoken to the ISP tech support and they are not familiar with Mikrotiks hence unable to provide advice on which model will be suitable. They however advised the requirement for the modem router to support VLAN ID/VLAN Tagging. I have noted that Mikrotik RB3011UiAS-RM support VLAN ID/VLAN Tagging. Questions are: 1. Has anyone else use Mikrotik RB3011UiAS-RM and able to confirm this can is suitable for FTTC? 2. Which Mikrotik routers have others used successfully with FTTC? 3. Apart from username, password, DNS configurations; is there any NBN FTTC configurations details/information or some sort available to make the Mikrotik router work with FTTC? The ISP has provided the following link to a video which shows the connection will be from telephone socket -> NCD -> Router <https://iihelp.iinet.net.au/NBN_FTTC_Setup_Video> https://iihelp.iinet.net.au/NBN_FTTC_Setup_Video Regards,

5 7

Re: [MT-AU Public] Radar detection Chaos Since 6.40.4
by Mike Everest 31 May '19

31 May '19

Hi Harry, thanks for the comments! (have you tried subscribing to the public list? What happens when you try to add a subscription?) That is only the LIPD class license document but it does not list the relevant standards. The standards list some of the ETSI specifications which according to MT include radar detect operation. From MT perspective, they claim that DFS implies Radar Detect in the relevant standards. I have no doubt that it DOES make that link in the EU specification, but since our AU compliance requirements also refer to some ETSI standard then it is possible that our rules are also affected by the recent updates to relevant ETSI standards simply by association and since ACMA have not explicitly excluded that revision... This is what I am attempting to ascertain ;) So far, I have not been able to find the direct relationships and have been doing the rounds of some compliance folks to try to get to the bottom of it all. It may take some time :-1 Cheers, Mike. ---------------------------------------------------------------------------- -------- Why Choose DuxTel for all your MikroTik needs? 10 good reasons: http://duxtel.com/why_duxtel ---------------------------------------------------------------------------- -------- Follow our tweets for news and updates: http://twitter.com/duxtel > -----Original Message----- > From: Harry Fiotakis [mailto:Harry.Fiotakis@tasmanet.com.au] > Sent: Monday, 23 October 2017 10:39 AM > To: Mike Everest (mike(a)duxtel.com) <mike(a)duxtel.com> > Cc: Philip Loenneker <Philip.Loenneker(a)tasmanet.com.au> > Subject: RE: [MT-AU Public] Radar detection Chaos Since 6.40.4 > > Morning Mike, Phil forwarded me the latest correspondence as I still have not > been approved on the mailing list :( > > https://www.legislation.gov.au/Details/F2015L01438 (Radiocommunications > (Low Interference Potential Devices) Class Licence 2015) > > 5250-5350 Must use DFS > 5470-5600 Must use DFS > 5650-5725 Must use DFS > > No Radar Detect required (it is not implied) > > We will have to seek official clarification on that if Mikrotik require it, but > with it forced on we are downgrading Mikrotik radios or simply not using > them. > > > Regards, > > Harry Fiotakis | TasmaNet > 40-50 Innovation Drive, Tas 7010, Australia > M: 0418 540 806 P: 1300 792 711 > Email: harry.fiotakis(a)tasmanet.com.au > > > -----Original Message----- > From: Philip Loenneker > Sent: Monday, October 23, 2017 10:30 AM > To: Harry Fiotakis <Harry.Fiotakis(a)tasmanet.com.au> > Subject: FW: [MT-AU Public] Radar detection Chaos Since 6.40.4 > > > -----Original Message----- > From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of > Mike Everest > Sent: Monday, 23 October 2017 9:50 AM > To: 'MikroTik Australia Public List' <public(a)talk.mikrotik.com.au> > Subject: Re: [MT-AU Public] Radar detection Chaos Since 6.40.4 > > Further update on this issue, > > I've had a bit of correspondence with them, but they are 'fighting' it. Latest > comment from them is that "ETSI standard mentions when you use DFS and > those ranges you need to use the Radar-detect. Radar detect is happening > only for 1 minute." > > The line they are taking is that since our LIPD class license specification says > that DFS must be enabled for the sub 5785 channels, then radar detect must > also be enabled. I've been trying to pore through all the relevant ACMA > documentation so that I can find some definitive paragraph that clarifies the > situation, but so far have drawn a blank. > > I need someone who has some specific familiarity with the relevant rules and > standard that can find something that will convince them to turn it off - any > takers? :-} > > Cheers, Mike. > > > > _______________________________________________ > Public mailing list > Public(a)talk.mikrotik.com.au > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au

5 26

Mikrotik VPN and MS Windows authentication issues
by Paul Julian 29 May '19

29 May '19

Hi All, We have a customer who is running a Windows server environment with Active Directory, they also use a Mikrotik and run PPTP VPN to connect into their office. They are having issues with authentication on the Windows PC's when accessing the shares on the server and wondering if anybody has any suggestions on how to make this work. I recall some time ago that there were issues if the cached credentials on the PC's weren't updated regularly, and I have also wondered if using Windows IAS for the VPN Authentication may help but the customer is looking to us for help and I haven't really done this sort of thing for a while and was hoping that somebody could point me in the right direction for a solution which would work for them and not cause them to have to re-auth when accessing those resources on the server. Thanks Paul

7 13

Mikrotiks odds and ends for sale
by Jason Hecker 26 May '19

26 May '19

If you didn't think you had enough 24V plugpacks and PoE splitter cables lying about then have I got a deal for you! PSU https://www.ebay.com.au/itm/113761747032 100Mbit splitters https://www.ebay.com.au/itm/113760524420 1Gbit splitters https://www.ebay.com.au/itm/113761733187 And this HP switch which I will send to you in the CRS328 box that replaced it. https://www.ebay.com.au/itm/113761690096 Regards, Jason Hecker <https://www.upandrunningtech.com.au/> <https://www.upandrunningtech.com.au/>

1 0